
$ rpki-client -vvf rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
File: GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft (raw, json)
Hash identifier: pjSw71ypXiTzdFiOzUZIA3SoPRD+xCwAT3x4tBXOvkY=
Subject key identifier: A9:63:0F:9D:0C:53:6E:F5:95:3C:3C:44:E1:C6:64:E4:48:13:B6:B7
Authority key identifier: 1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D
Certificate issuer: /CN=A91519CC/serialNumber=1B3683525944774388853090D1005BB51552246D
Certificate serial: 80
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
Manifest number: 79
Signing time: Mon 27 Jul 2026 10:05:15 +0000
Manifest this update: Mon 27 Jul 2026 10:05:15 +0000
Manifest next update: Mon 03 Aug 2026 10:05:15 +0000
Files and hashes: 1: GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl (hash: Us9LAw7xg0rEzPbwTFFN1CjQWvQemD/6riDcN/bt/2g=)
2: 9D232386DA5A11F08EBD209195D3641D.roa (hash: QOzthGopxBzd3k4toAQMU4imXtsyINBxu6ucmSP2zFQ=)
3: 9C9F0DC6DA5A11F08EBD209195D3641D.roa (hash: JgdmWI3k7cOqCcItbOe6xRBhm/7mwOzKG5iBpPWBzvY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl
rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:05:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91519CC, serialNumber=1B3683525944774388853090D1005BB51552246D
Validity
Not Before: Jul 27 10:05:15 2026 GMT
Not After : Aug 3 10:05:15 2026 GMT
Subject: CN=6a672d5b-69a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e1:06:ad:ea:56:d7:6d:81:bb:b9:e6:09:78:
c9:28:13:3b:a1:69:67:07:9a:79:14:14:84:49:64:
dd:f0:71:b7:16:f5:2a:ee:96:4c:ca:af:17:2f:73:
3f:dc:dc:7a:bc:59:8a:e4:54:06:59:b0:8a:93:4a:
9b:c1:ec:20:4e:f6:f6:24:7c:24:73:c2:af:5c:eb:
fa:b3:6a:28:18:66:f1:5f:cb:cb:ad:3a:7c:de:ef:
97:ba:5d:be:41:15:7e:4f:7a:cb:c8:c1:92:88:f1:
06:2f:26:fd:5a:d7:86:c6:3f:a9:7e:67:3f:17:2f:
fd:82:26:5b:5b:a5:23:44:61:c3:54:b9:6b:93:38:
31:17:35:f0:d5:78:2e:1f:f2:a0:cb:a2:df:37:c7:
35:44:92:55:bc:f4:c7:ac:b4:b1:c8:bd:93:be:51:
ef:b1:e5:f8:1d:fa:e4:17:0a:99:43:a6:d8:80:de:
98:1a:d3:e8:d9:9b:95:ab:17:fb:1c:ee:aa:db:1d:
de:60:45:ae:9c:8a:63:b9:3f:fc:6b:eb:8b:62:0c:
60:7a:a6:c8:9f:89:10:e8:71:73:c0:dd:8a:0a:fe:
b9:70:e2:b1:84:df:49:8b:0d:60:22:3f:0e:e5:cd:
63:2b:2b:9c:04:46:2b:d6:5d:e1:f6:a8:c6:92:be:
80:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:63:0F:9D:0C:53:6E:F5:95:3C:3C:44:E1:C6:64:E4:48:13:B6:B7
X509v3 Authority Key Identifier:
keyid:1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c7:eb:87:20:a1:35:27:2d:3e:fc:4d:3f:d5:40:80:8b:60:
07:73:29:1c:4b:d4:c1:b8:c6:0f:29:51:cb:20:2e:e1:eb:fa:
7f:9d:79:6d:32:5a:de:ef:ac:5a:74:ef:52:09:3c:96:d1:4d:
42:b0:0e:d6:71:a3:fb:d8:b1:d7:89:74:b4:b7:94:0b:6f:07:
47:42:76:09:83:f0:ec:5c:c1:e3:bf:27:f7:35:f6:7b:e0:f7:
8a:fd:63:27:de:21:df:f9:1c:26:8d:ac:3f:0e:4a:8e:cd:2a:
5b:ef:a7:e9:53:d9:9b:48:70:87:c9:f4:9f:81:64:83:56:fe:
d6:0c:83:7a:4c:97:81:43:f0:ae:86:f9:3b:53:0b:fb:1b:b9:
0f:7b:7b:3c:22:cf:06:ad:3d:82:73:4d:dd:17:88:8e:34:2d:
c6:4a:f3:f7:00:34:a9:9e:90:ca:65:07:9c:04:98:b0:b0:68:
07:01:3e:66:8d:6c:c8:32:d6:b3:04:50:2d:06:e1:ee:d3:8a:
fd:cf:0e:a7:41:7e:51:69:35:20:38:6a:b7:2f:3b:7e:20:cf:
d1:13:f6:6c:fb:f0:a3:c0:67:78:51:ce:43:dc:ab:7a:87:87:
b4:03:3f:8e:5d:e2:bc:82:02:6c:e6:d5:72:46:8c:19:ee:e5:
39:2f:5a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:12:12 2026 by rpki-client